Lnbits releases emergency patch after Bitcoin wallet thefts
The open‑source Lightning wallet platform urged operators to upgrade to version 1.7.0 and reset all credentials after a wave of attacks stole about 2.3 million satoshis.
Key takeaways
- 1LNbits released emergency version 1.7.0 on 11 Nov 2026
- 2Vulnerability affects all versions prior to 1.7.0
- 3At least 2.3 million satoshis (0.023 BTC) stolen from one user
Lnbits published version 1.7.0 on Tuesday, November 11, 2026, after reporting a series of attacks that stole roughly 2.3 million satoshis (0.023 BTC) from at least one user’s instance. The breach prompted the project to label the release as a critical emergency patch.
The patch addresses vulnerabilities that affect every LNbits installation running a version older than 1.7.0. The project warned that simply upgrading does not protect servers whose authentication secrets were already exposed, and that compromised credentials can be used to withdraw funds even after the update.
Ben Arc, the creator of LNbits, said on X that the team worked “relentlessly” to ship the release after users suffered losses. He added that operators must treat any stored secrets as compromised and replace funding‑source credentials immediately.
LNbits initially asked operators on Sunday to disable its Paywall extension while investigating a potential flaw. An hour later it advised shutting down all LNbits servers, taking its own hosted instances offline, and resetting wallet keys or moving to a fresh server if compromise is suspected.
LNbits provides software for running Bitcoin Lightning wallets, merchant checkouts, tipping services and paywalls. The emergency update strengthens authentication, extension management and payment handling, aiming to prevent attackers from creating new accounts and draining funds.
The project said a detailed technical report on the exploit will follow. Operators are urged to apply version 1.7.0 without delay, revoke old API keys, and monitor their nodes for any unauthorised activity.
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.